An Improved Tight Closure Algorithm 
for Integer Octagonal Constraints* 



Roberto Bagnara^, Patricia M. Hill^, and Enea ZafFanella^ 

^ Department of Mathematics, University of Parma, Italy 
{bagnara.zaf f anella}(§cs .unipr . it 
^ Scliool of Computing, University of Leeds, UK 
hillOcomp . leeds .ac.uk 



Abstract. Integer octagonal constraints (a.k.a. Unit Two Variables Per 
Inequality or UTVPI integer constraints) constitute an interesting class 
of constraints for the representation and solution of integer problems 
in the fields of constraint programming and formal analysis and verifi- 
cation of software and hardware systems, since they couple algorithms 
having polynomial complexity with a relatively good expressive power. 
The main algorithms required for the manipulation of such constraints 
are the satisfiability check and the computation of the inferential closure 
of a set of constraints. The latter is called tight closure to mark the dif- 
ference with the (incomplete) closure algorithm that does not exploit the 
integrality of the variables. In this paper we present and fully justify an 
0{n^) algorithm to compute the tight closure of a set of UTVPI integer 
constraints. 



1 Introduction 

Integer octagonal constraints, also called Unit Two Variables Per Inequality 
(UTVPI) integer constraints — that is, constraints of the form ax + by < d where 
a, 6 e { — 1, 0, +1}, d E 1^ and the variables x and y range over the integers — , con- 
stitute an interesting subclass of linear integer constraints admitting polynomial 
solvability. The place these constraints occupy in the complexity/expressivity 
spectrum is in fact peculiar. Concerning complexity, relaxing the restriction im- 
posing (at most) two variables per constraint, or relaxing the restriction on 
coefficients, or relaxing both restrictions make the satisfiability problem NP- 
complete |13I14| . Concerning expressivity, integer octagonal constraints can be 
used for representing and solving many integer problems in the field of constraint 
programming, such as temporal reasoning and scheduling ^13, . In the field of for- 
mal analysis and verification of software and hardware systems, these constraints 
have been successfully used in a number of applications [51619119] . 
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When (integer or rational) octagonal constraints are used to build abstract 
domainflfl — such as the Octagon Abstract Domain implemented in the library 
with the same name 20 or the domain of octagonal shapes defined in [2\ and 
implemented in the Parma Polyhedra Library [4J — the most critical operation 
is not the satisfiability check (although very important in constraint program- 
ming) but closure by entailment. This is the procedure whereby a set of octagonal 
constraints is augmented with (a finite representation of) all the octagonal con- 
straints that can be inferred from it. The closure algorithms for rational octago- 
nal constraints are sound but not complete for integer octagonal constraints. The 
latter require so-called tight closure algorithms that fully exploit the integrality 
of the variables. 

In 2005, Lahiri and Musuvathi proposed an Oin?) algorithm for the sat- 
isfiability check of a (non trivially redundant) system of UTVPI integer con- 
straints [TS]. They also sketched (without formal definitions and proofs) a tight 
closure algorithm with the same worst-case complexity bound. Still in 2005, 
Mine proposed a modification of the strong (i.e., non-tight) closure algorithm 
for rational octagonal constraints and argued that this would provide a good and 
efficient approximation of tight closure |16| . In the same year we showed that 
the algorithm for computing the strong closure of rational octagonal constraints 
as described in [16j could be simplified with a consequential improvement in its 
efficiency |2|3j . In this paper we show that our result can be extended so as to 
apply to integer octagonal constraints. This enables us to present and, for the 
first time, fully justify an 0("-^) algorithm to compute the tight closure of a set 
of UTVPI integer constraints. 

In Section [5] we briefly introduce the terminology and notation adopted 
throughout the paper and we recall a few standard results on weighted graphs. In 
Section [3l we give the definition of rational- weighted octagonal graphs and recall 
some of the results that were established in [2 3J. In Section [H we extend these 
results to the case of integer- weighted octagonal graphs. Finally, in Section [5] we 
conclude and briefly discuss future work. 

2 Preliminaries 

Let <Qoo Q U {+00} be totally ordered by the extension of '<' such that 
d < -\-oo for each d G Q. Let A/" be a finite set of nodes. A rational- weighted 
directed graph (graph, for short) G in TV is a pair (A/", w), where w: AfxAf ^ Qco 
is the weight function for G. 

Let G = {Mjw) be a graph. A pair {ni,nj) E JV x JV is an arc of G if 
w{ni, Uj) < +00; the arc is proper if Ui ^ Uj. A path tt = ng • • ■ rip in G is a 
non-empty and flnite sequence of nodes such that (ni_i,ni) is an arc of G, for 
alH = 1, ■ ■ ■ , p. Each node where i = 0, ■ ■ ■ , p and each arc (n^^i, n^) where 

^ In abstract interpretation theory [S], an abstract domain is an algebraic structure 
formalizing a set of approximate assertions endowed with an entailment (or approx- 
imation) relation, plus various operations that correctly approximate the operations 
of some concrete domain, i.e., the domain being abstracted/approximated. 



2 



i = 1, . . . , p is said to be in the path tt. The length of the path tt is the number 
p of occurrences of arcs in tt and denoted by ||7r||; the weight of the path tt is 
X]f=i ^('^i-ij ^i) ELud denoted by w{Tr). The path tt is simple if each node occurs 
at most once in tt. The path tt is proper if all the arcs in it are proper. The path 
TT is a proper cycle if it is a proper path, uq = Hp and p > 2. If tti = uq ■ ■ ■ Uh 
and 7r2 = ■ ■ ■ Up are paths, where < /i < p, then the path concatenation 
77 = no ■ ■ ■ Ufi ■ ■ ■ Up of TTi and 7r2 is denoted by tti :: 772; if tti = tio"-i (so that 
h = 1), then tti :: 772 will also be denoted by no"7i'2- Note that path concatenation 
is not the same as sequence concatenation. The path tt is a zero- cycle if it is a 
proper cycle and it;(7r) = 0. A graph is zero-cycle free if all its proper cycles have 
strictly positive weights. 

A graph (TV, w) can be interpreted to represent the system of potential con- 
straints 

C := { Hi — nj < w{ni, nj) | n^, Uj £ J\f}. 

Hence, the graph (A/", w) is consistent if and only if the system of constraints it 
represents is satisfiable in Q, i.e., there exists a rational valuation p: A/" — > Q 
such that, for each constraint (n^ — Uj < d) € C, the relation p{ni) — p{nj) < d 
holds. It is well-known that a graph is consistent if and only if it has no negative 
weight cycles (see [7J Section 25.5] and p3]). 

The set of consistent graphs in M is denoted by G. This set is partially 
ordered by the relation defined, for all Gi = {N,wi) and G2 = (TV, t«2), by 

Gi<G2 <^ Vi, j e TV : u;i(i, j) < u;2(«,j)- 

We write G <\G' when G <G' and G ^ G' . When augmented with a bottom 
element _L representing inconsistency, this partially ordered set becomes a non- 
complete lattice G_L = (G U {-L}, n, u), where 'n' and 'U' denote the finitary 
greatest lower bound and least upper bound operators, respectively. 

Definition 1. (Closed graph.) A consistent graph G = {N,w) is closed if the 

following properties hold: 

yieJ\f:w{i,i)^0; (1) 
V«, j,k € J\f : w{i,i) < w{i, k) -\- w{k, j). (2) 

The (shortest-path) closure of a consistent graph G in J\f is 

closure(G) := |J{ G' G G | G' < G and G' is closed]. 

When trivially extended so as to behave as the identity function on the bottom 
element _L, shortest-path closure is a kernel operator (monotonic, idempotent 
and reductive) on the lattice G±, therefore providing a canonical form. 

The following lemma recalls a well-known result for closed graphs (for a proof, 
see Lemma 5 in [3]). 

Lemma 1. Let G — (TV, w) E G be a closed graph. Then, for any path t: = i ■ ■ ■ j 
in G, it holds that w{i,j) < w{t:). 
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3 Rational Octagonal Graphs 



We assume in the following that there is a fixed set V = {vq, . . . of n 

variables. The octagon abstract domain allows for the manipulation of octag- 
onal constraints of the form avi + bvj < d, where a,b & {— 1,0, +1}, a ^ 0, 
Vi,Vj G V, Vi Vj and li G Q. Octagonal constraints can be encoded using po- 
tential constraints by splitting each variable Vi into two forms: a positive form 
vf, interpreted as -\-Vi; and a negative form v~ , interpreted as —Vi. Then any 
octagonal constraint aVi + hvj < d can be written as a potential constraint 

V — v' < do where v,v' G {v^ ,Vj' ,v~} and do G Q. Namely, an octagonal 
constraint such as Vi + vj < d can be translated into the potential constraint 

— vJ < d; alternatively, the same octagonal constraint can be translated into 
tit — v~ < d. Furthermore, unary (octagonal) constraints such as Vi < d and 
—Vi < d can be encoded as v^' — < 2d and — vf < 2d, respectively. 

Prom now on, we assume that the set of nodes is TV := {0, . . . , 2n — 1}. These 
will denote the positive and negative forms of the variables in V: for all i G A/", if 
i = 2fc, then i represents the positive form t;^ and, if i = 2k-\-l, then i represents 
the negative form v'j^ of the variable v^- To simplify the presentation, for each 
i G A/", we let i denote i + 1, if i is even, and z — 1, if i is odd, so that, for all 
i G N, we also have i € J\f and i = i. Then we can rewrite a potential constraint 

V — v' < d where v G {v^,v'j^} and v' G {vi~,v^} as the potential constraint 
i — j < d in Af where, if v = v'^ , i = 2k and, if v = v'j^ , i = 2k + 1; similarly, if 
v' = v'l' , j = 21 and, if v' = , j = 21 + 1. 

It follows from the above translations that any finite system of octagonal 
constraints, translated to a set of potential constraints in J\f as above, can be 
encoded by a graph G in TV. In particular, any finite satisfiable system of oc- 
tagonal constraints can be encoded by a consistent graph in TV. However, the 
converse does not hold since in any valuation p of an encoding of a set of oc- 
tagonal constraints we must also have p{i) = —p{t), so that the arcs (i, j) and 
should have the same weight. Therefore, to encode rational octagonal con- 
straints, we restrict attention to consistent graphs over TV where the arcs in all 
such pairs are coherent. 

Definition 2. (Octagonal graph.) A (rational) octagonal graph is any con- 
sistent graph G = (TV, w) that satisfies the coherence assumption: 

Vi,j gTV: u;(i,j) = «;(j,l). (3) 

The set O of all octagonal graphs (with the usual addition of the bottom element, 
representing an imsatisfiable system of constraints) is a sub-lattice of , sharing 
the same least upper bound and greatest lower bound operators. Note that, at 
the implementation level, coherence can be automatically and efficiently enforced 
by letting are (i, j) and arc (j, 7) share the same representation. 

When dealing with octagonal graphs, one has to remember the relation link- 
ing the positive and negative forms of variables. A proper closure by entailment 
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procedure should consider, besides transitivity, the foUowing inference rule: 

i-t <di J~ j <d2 

. ^ di+d2 (4) 

Thus, the standard shortest-path closure algorithm is not enough to obtain a 
canonical form for octagonal graphs. 

Definition 3. (Strongly closed graph.) An octagonal graph G = {J\f,w) is 
strongly closed if it is closed and the following property holds: 

yi,j e J\f : 2w{i,j) < w{i,t) + w{j,j). (5) 

The strong closure of an octagonal graph G in J\f is 

S-closure(G) := |J{ G" £ O | G" < G anrf G' is strongly closed ]. 

When trivially extended to the bottom element, strong closure is a kernel oper- 
ator on the lattice of octagonal graphs. 

A modified closure procedure is defined in [T7], yielding strongly closed oc- 
tagonal graphs. A significant efficiency improvement can be obtained thanks to 
the following theorem (for a proof, see Theorem 2 in [3]). 

Theorem 1. Let G — {J\f,w) be a closed octagonal graph. Consider the graph 
Gs = (A/", Wg), where Wg is defined, for each i, j G A/", by 

WsihJ) minj w{i,j), — - — H — V. 

Then Gs = S-closure(G). 

Intuitively, the theorem states that strong closure can be obtained by appli- 
cation of any shortest-path closure algorithm followed by a single local prop- 
agation step using the constraint inference rule ([4|). In contrast, in the strong 
closure algorithm of [17], the outermost iterations of (a variant of) the Floyd- 
Warshall shortest-path algorithm are interleaved with n applications of the in- 
ference rule ([4]), leading to a more complex and less efficient implementation. 

4 Integer Octagonal Graphs 

We now consider the case of integer octagonal constraints, i.e., octagonal con- 
straints where the bounds are all integral and the variables are only allowed to 
take integral values. These can be encoded by suitably restricting the codomain 
of the weight function of octagonal graphs. 

Definition 4. (Integer octagonal graph.) An integer octagonal graph is an 
octagonal graph G = (TV, w) having an integral weight function: 

WiJ eAf:w{i,j) eZU{+oo}. 
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As an integer octagonal graph is also a rational octagonal graph, the con- 
straint system it encodes will be satisfiable when interpreted to take values in Q. 
However, when interpreted to take values in Z, this system may be unsatisfiable 
since the arcs encoding unary constraints can have an odd weight; we say that 
an octagonal graph is "L-consistent if its encoded integer constraint system is 
satisfiable. For the same reason, the strong closure of an integer octagonal graph 
does not provide a canonical form for the integer constraint system it encodes 
and we need to consider the following tightening inference rule: 

i — I < d 

= . (6) 

i~i< 2[d/2j 

Definition 5. (Tightly closed graph.) An octagonal graph G — (TV, w) is 
tightly closed if it is a strongly closed integer octagonal graph and the following 
property holds: 

yi £ J\f : w{i,i) is even. (7) 
The tight closure of an octagonal graph G in Af is 

T-closure(G) := |J{ G" G O | G" < G and G' is tightly closed }. 

By property (O, any tightly closed integer octagonal graph will encode a 
satisfiable integer constraint system and is therefore Z-consistent. Moreover, 
since the encoding of any satisfiable integer constraint system will result in a Z- 
consistent integer octagonal graph G that satisfies property ([7]), its tight closure 
T-closure(G) will also be Z-consistent. This means that, if G is not Z-consistent, 
then T-closure(G) = |J = ±; that is, the tight closure operator computes ei- 
ther a tightly closed graph or the bottom element. Therefore, tight closure is a 
kernel operator on the lattice of octagonal graphs, as was the case for strong 
closure. 

An incremental closure procedure for obtaining the tight closure of an oc- 
tagonal graph was defined in [13] and improved in il2j . The algorithm, which is 
also presented and discussed in [191 Section 4.3.5], maintains the tight closure 
of a system of octagonal constraints by performing at most 0{n^) operations 
each time a new constraint is added: thus, for m constraints, the worst case 
complexity is 0(mn^). In particular, for the case of a dense system of octagonal 
constraints where m e 0{n^), the worst case complexity is 0{n'^). 

The following theorem shows that a more efficient tight closure algorithm can 
be obtained by a simple modification to the improved strong closure algorithm 
of Theorem [TJ Basically, inference rule ^ must be applied to ensure property 
([7]) holds before applying inference rule 

Theorem 2. Let G — {J\f,w) be a closed integer octagonal graph. Consider the 
graph Gt = (A/", w-p), where Wj' is defined, for each i,j G Af, by 

w{i,t) I , w{j,j) 



WriiJ) ■= min<^ w{i,j), 



Then, if Gx is an octagonal graph, Gt — T-closure(G) . 
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procedure tight_closure_if .consistent (var w [0 . . 2n — 1] [0 . . 2n — 1]) 
{ Classical Floyd- Warshall; O(n^) } 
for ~ to 2n — 1 do 

for j ~ to 2n — 1 do 

for j := to 2n — 1 do 

w[i,j] ■- mm{w[i,j],w[i,k] +w[k,j]); 
{ Tight coherence: Oin^) } 
for i := to 2n — 1 do 

for j to 2n — 1 do 



Fig. 1. A 0("-^) tight closure algorithm for Z-consistent integer octagonal graphs 

Figure [T] shows the pseudo-code for a 0{n^) tight closure algorithm based on 
Theorem [2] and on the classical Floyd- Warshall shortest-path closure algorithm. 
Note that the pseudo-code in Figure [1] assumes that the data structure recording 
the weight function w, here denoted to be similar to a bidimensional array, 
automatically implements the coherence assumption for octagonal graphs (i.e., 
property ^ of Definition ^ . 

In the case of sparse graphs, a better complexity bound can be obtained by 
modifying the code in Figure [T] so as to compute the shortest path closure using 
Johnson's algorithm [7]: the worst case complexity of such an implementation 
will be 0(n.^logn -I- mn), which significantly improves upon the 0{mn^) worst 
case complexity of |12|13] when, e.g., m e Q{n). However, as observed else- 
where |19l24j . some of the targeted apphcations (e.g., static analysis) typically 
require the computation of graphs that are dense, so that the Floyd- Warshall 
algorithm is often a better choice from a practical perspective. 

It is possible to define an incremental variant of the tight closure algorithm 
in Figure [1] which is simply based on the corresponding incremental version of 
the Floyd- Warshall shortest path closure algorithm. In such a case, we obtain 
the same worst case complexity of |12ll3j . 

The proof of Theorem [2] relies on a few auxiliary lemmas. The first two were 
also used in [3j for the formal proof of Theorem[l] above (for their detailed proofs, 
see Lemmas 9 and 10 in [3]). 

Lemma 2. Let G = (TV, w) be an octagonal graph, G* — {Af, w*) := closure(G') 
and (zi, Z2) be an arc in G* . Then there exists a simple path n — zi ■ ■ ■ Z2 in G 
such that w*{zi, Z2) = w{-k). 

Lemma 3. Let G = (TV, w) be a closed octagonal graph and i,i £ J\f be such 
that i ^ J and 2w{i,j) > w{i,i) + w{j,j). Let G* = {M,w*) := closure(Gs) 



w[i,j] := mini ui[i, j], floor(w[i, i]/2) + floor (u'[j,j]/2 
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where Gs :— {J\f,Ws) and, for each /ii,/i2 £ A/", 
Ws{hi,h2) ■■ 



{w{i,i) +w{j,j))/2, if{hi,h2) £ {(i, j), (j, i)}; 
w{hi,h2), otherwise. 



Let also zi,Z2 G A/". Then one or both of the following hold: 
wt{zi, Z2) = w{zi, Z2); 

2w*{zi, Z2) > U)(zi, Zl) + W{Z2, Z2). 

Informally, Lemma [3] states that if inference rule (jl]) is applied to a closed oc- 
tagonal graph, then the resulting graph can be closed just by making further 
applications of inference rule Note that, if G is an integer octagonal graph 
and property ([7]) holds, then the derived graph Gg will also be an integer oc- 
tagonal graph. We now state a new lemma for integer octagonal graphs showing 
that when inference rule ^ is applied we obtain a similar conclusion to that for 
Lemma [3] 

Lemma 4. Let G = (A/", w) be a closed integer octagonal graph and i G Af. 
Let G* := closure(Gt) where Gt '■= (MjWt) is an octagonal graph and, for each 
hi,h2 eAf, 

/, , X {w{i,i)-l, if {hi,h2) = {i,i); 
wt{hi,h2) -.^ ■> (8) 
\w[rii,n2), otherwise. 

Let G* = (A/", w^) and 21, Z2 G A/". Then one or both of the following hold: 

W^{zi,Z2) =w{zi,Z2), (9) 

-?(^i,^2)>[%^J + [%^J. (10) 

Proof. By hypothesis and Definition [l] < Gt 53 G. If (zi, Z2) is not an arc in 
G^ , then w*{zi,Z2) = +00; thus, as Gj < G, we also have w{zi, Z2) = +00 and 
hence property ([9]) holds. Suppose now that (zi,Z2) is an arc in G*. Then we 
can apply Lemma [H so that there exists a simple path tt = zi • • ■ Z2 in Gt such 
that w^{zi,Z2) = Wt(T^). 

Suppose first that Wt{'K) — w{'k). Then, as G is closed, by Lemma [1] we 
obtain 'w{-k) > w(zi, Z2) so that w^{zi,Z2) > w{zi,Z2). However Gj < G so that 
w^{zi,Z2) < w{zi,Z2) and therefore property ^ holds. 

Secondly, suppose that u;t(7r) ^ w^tt). Then, by Equation ([5]), {i,t) must be 
an arc in tt, so that 

TT = TTi :: (it) :: 7r2, (11) 

where tti = zi • ■ • i, 7r2 = J ■ • ■ Z2 are simple paths in Gt that do not contain the 
arc {i,t}. Therefore, by Equation ([8]), we have ti;t(7ri) = w^ni), 101(7^2) = w{tt2). 
Consider ^ and lelQ 

tt[ = TTi :: (ii) :: 7fi, 773 = n2 ■■ {it) ■■ ^2- 



If -K — jo ■ ■ ■ jp is a path in a graph in A/", then tt denotes the path Jp - ■ ■ Jq. 
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As G is an octagonal graph, we have 'w{'Ki) — w{tti) and w{tt2) — w{tt2) so that 



wiiT'i) — 2ii;(7ri) + w{i, i) 
As G is closed, by Lemma [U 

w{-k[) > w{zi,zi), 

so that 

w{i,i) w{zi,zi) 

Therefore 



w(7r2) 



win'^) > w{z2, Z2) 



w{i,i) ^ W{Z2, Z2) 



Wti-n) = Wt{TTi) + Wt{i,i) + Wt(7r2) 
w{zi,zi 



, , w{i, i) — \ , - 
■"'(■"'i) "I ^ w(7r2j 



«) — 1 



> 



> 



w(zi,zi) 



w(z2,^:2) 
2 

W(^2, Z2) 



Hence, as w\(z\^Z2) = ti;t(7r), we obtain property (jlOp . as required. □ 

The next result, uses Lemmas |3] and |4] to derive a property relating the weight 
functions for a closed integer octagonal graph and its tight closure. 

Lemma 5. Let G — (A/", w) he a closed integer octagonal graph such that G"^ = 
(J^fjiu^) := T-closure(G') is an octagonal graph and let zi, Z2 E M . Then one or 
both of the following hold: 



w^{zi, Z2) = w{zi, Z2); 
w^{zi, Z2) 



Zl) 


+ 


L 2 





^(22,^2) 



(12) 
(13) 



Proof. The proof is by contraposition; thus wc assume that neither ([T^ nor (|13p 
hold. Without loss of generality, let the graph G be <-minimal in the set of all 
closed integer octagonal graphs such that T-closure(G') = G"^ and for which 
neither p2|) nor (fT3|) hold. Clearly the negation of (|12p implies that G ^ G"^, so 
that G'^ <\ G. 

As G is closed but not tightly closed, by Definitions [3] and O it follows that 
there exist j e A/" such that either 

(i) i —'] and w{i,i) is odd; or 

(ii) property ([7]) holds and 2w{i,j) > w{i,i) + w{j,j). 
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Consider graph Gi = {J\f,wi) where the weight function wi is defined, for all 
hi,h2 e Af, by 



wi{hi,h2 



w{i,t) 



[w{hi,h2), 

Let Gl = closure(Gi). By Definitions [TJ [3] and El 

< G| < Gi < G. 



otherwise. 



(14) 



Thus T-closure(G|) = so that, by the minimality assumption on G, one or 
both of the following hold: 



w'^izi, Z2) = wl{zi,z2); 
w^{zi, 22) = 



wt{zi,zi) 




wt{z2,Z2) 


I 2 J 


+ 


I 2 J 



(15) 
(16) 



As G"^ ^ _L, by (fT4|) . Gi is consistent. Therefore, by construction, Gi is 
an integer octagonal graph. If property (jl} holds for then Lemma |4] can be 
applied and, if property (|n]) holds for then Lemma[3]can be applied and also, 
since property ([7]) holds, both wi{zi,'zi) and w{'z2,Z2) are even. Hence, letting 
G\ :— (TV, Wi), one or both of the following hold: 



^1(21, 22) = w(2i,Z2); 

^1(21, Z2) > 
Again by Lemmas |3] and IH 

w{zi,zi) 



|^u;(zi,2;i)j ^ 


U'(22, 22) 




L 2 J 



(17) 
(18) 



w*(zi, zi) > 2 

<(22,22) > 2 



2 J' 

W(22, 22) I 



since the lower bounds for w*{zi, zi) and w*{z2, 22) are even integers, we obtain 



K(^l>2l)| , W\{Z2,Z2) ^ w(2i,Zl) 



"'(22,22) 



(19) 



Suppose first that and p?)) hold. Then by transitivity we obtain 
contradicting the contrapositive assumption for G. 
If US]) and (UHl) hold, then it follows 



"''''(21, 22) > 



w(zi,Zi) I W(Z2,22) 



(20) 



On the other hand, if (fT6|l holds, then, by (fT9|) . we obtain again property ([20l 
However, by Definition [5] we also have 



"''^(21,^2) < 



w(zi,Zi) I W(Z2,22) 
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By combining this inequality with (j20p we obtain p3p . contradicting the contra- 
positive assumption for G. □ 

Proof (of Theorem!!]). Let := T-closurc(G). By definition of Gt, Gt < G 
so that T-closure(GT) ^ G^ . As Gt is an octagonal graph, Gt is consistent, and 
hence G^ 7^ ±; let G'^ = (TV, w^). Letting i, j G A/", to prove the result we need 
to show that w^{i,j) = iutI^j j)- Let kij := [w{i,i)/2\ + [u;(j, j)/2j. 

By Definitions [1] [3] and [51 it follows that both properties w'^{i,j) < w{i,j) 
and w^{i,j) < kij hold so that, by definition of Wt, we have w'^{i,j) < WT^{i,j). 
By Lemma m w^{i^j) = w{i,j) and/or w^{i^j) = kij. Therefore since, by 
definition, W'Y{i,j) — min|z«(i, j), fc^ }, we obtain w^{i,j) < w'^{i,j). □ 

It follows from the statement of Theorem [2] that an implementation based 
on it also needs to check the consistency of Gt- In principle, one could apply 
again a shortest-path closure procedure so as to check whether Gt contains some 
negative weight cycles. Fortunately, a much more efficient solution is obtained 
by the following result. 

Theorem 3. Let G — {Af, w) be a closed integer octagonal graph. Consider the 
graphs Gt = (TV, Wt) and Gt = (TV, Wt) where, for each i,j€ J\f, 

WtihJ) ■■= < . (21) 

\w{i,]), otherwise; 

Wt{i,j) ■.= inmiw{i,j), — - — + — - — }. (22) 



Suppose that, for all i G M, Wt{i,i) + z«t(*,i) > 0. Then Gt is an octagonal 
graph. 

This result is a corollary of the following result proved in [T5', Lemma 4] . 

Lemma 6. Let G = (TV, w) he an integer octagonal graph with no negative 
weight cycles and Gt — (TV, wt), where wt satisfies pi|) . have a negative weight 
cycle. Then there exists z, 7 G TV and a cycle n ~ (i ■ tti -i) :: (j ■ 7:2 ■ i) in G such 
that w{tt) — and the weight of the shortest path in G from i to t is odd. 

Proof (of Theorem [3]). The proof is by contradiction; suppose Gt is not 
an octagonal graph; then by Definitions (TJ [3] and O Gt is inconsistent. We 
show that Gt is also inconsistent. Again, we assume to the contrary that Gt is 
consistent and derive a contradiction. Let i,j G TV. By (|2ip . we have Wt{i,j) < 
w{i,j) and Wtii,i)/2 + wt{j, j)/2 = k^j, where % := [w{i,i)/2\ + [w(j,j)/2\. 
Letting S-closure(Gt) = (TV, Wt), we have, by Definition [3l w^{i,j) < Wt{i,j) 
and wf{i,j) < wt{i,t)/2 + wt{j,j)/2. Thus w^{i,j) < min(w(i, j), fcy) . As this 
holds for all i,j G TV, by (j^ . S-closure(Gt) < Gt, contradicting the assumption 
that Gt was consistent. Hence Gt is inconsistent and therefore contains a negative 
weight cycle. 

By Lemma [6l there exists i,i G TV and a cycle tt = (i ■ wi -i) :: (i ■ 7r2 • i) 
in G such that w{tt) = and the weight of the shortest path in G from i to 
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I is odd. As G is closed, w{i,i) < w{i • tti • l) and 10(1, i) < wlj ■ 1x2 ■ i). Thus 
'w{i,i) + wii^i) < w{t:) = 0. Moreover, (ii) is a path and hence the shortest 
path from i to I so that w(yi) is odd; hence, by (HI]), w{i,i) — Wt{i,i) + 1 and 
«) > Wt (?,«). Therefore Wt{i,t) + Wt(«, *) < 0. □ 



function tight_closure(var [0 . . 2n — 1] [0 . . 2n — 1]) : bool 
{ Initialization: Oij') } 
for i := to 2n — 1 do 'w[i, i] :— 0; 
{ Classical Floyd-Warshall: O(n^) } 
for fc ~ to 2ri — 1 do 

for z ~ to 2n — 1 do 

for j := to 2rz — 1 do 

w[i,j] ■- mm{w[i,j],w[i,k] +w[k,j]); 
{ Check for Q-consistency: 0{n) } 
for i :— to 2n — 2 step 2 do 
if < return false; 

{ Tightening: 0(n) } 
for i := to 2n — 1 do 

:= floor(ii;[i, i]/2) ; 
{ Check for Z-consistency: 0{n) } 
for i :— to 2n — 2 step 2 do 

if + j] < return false; 

{ Strong coherence: Oin^) } 
for i := to 2n — 1 do 

for j := to 2n — 1 do 

w[i,j] ■- mm{w[i,j],w[i,i]/2 + w[j,j]/2); 
return true; 

Fig. 2. A 0{n^) tight closure algorithm for integer coherent graphs 



The combination of the results stated in Theorems and [3] (together with 
the well known result for rational consistency) leads to an 0{n^) tight closure 
algorithm, such as that given by the pseudo-code in Figure [U that computes 
the tight closure of any (possibly inconsistent) coherent integer-weighted graph 
returning the Boolean value 'true' if and only if the input graph is Z-consistent. 
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5 Conclusion and Future Work 

We have presented and fully justified an O(fi^) algorithm that computes the tight 
closure of a set of integer octagonal constraints. The algorithm — which is based 
on the extension to integer- weighted octagonal graphs of the one we proposed for 
rational-weighted octagonal graphs |2|3| — and its proof of correctness means the 
issue about the possibility of computing the tight closure at a computational cost 
that is asymptotically not worse than the cost of computing all-pairs shortest 
paths is finally closed. 

In the field of hardware and software verification, the integrality constraint 
that distinguishes integer- weighted from rational- weighted octagonal graphs can 
be seen as an abstraction of the more general imposition of a set of congruence 
relations. Such a set can be encoded by an element of a suitable abstract domain 
such as the non-relational congruence domain of [TD] (that is, of the form x — a 
(mod 6)), the weakly relational zone- congruence domain of [18] (that is, also 
allowing the form x — y — a (mod 6)), the linear congruence domain of |11| . 
and the more general fully relational rational grids domain developed in [T]. 
The combination of such domains with the abstract domain proposed in |2l3j 
is likely to provide an interesting complexity-precision trade-off. Future work 
includes investigating such a combination, exploiting the ideas presented in this 
paper. 
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